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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )^ Responsive to communication(s) filed on 26 April 2006 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 19-25 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 19-25 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121 (d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .D Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Amendment 

Claims 19-25 are currently pending. 
Claim 19 is currently amended. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 19-21, 23 and 25 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Sullivan in view of the product Nokia IP330 (evidenced relied upon to teach that the features of 
the Nokia IP330 as well as the availability of the product to the public includes: (1) article 
"Nokia IP Network Security Solutions": (2) "VPN White Paper: Secure Enterprise 
Communication": (3) press release "Nokia wins 'Firewall Product of the Year' award for the IP 
Security Solution: IP330 at the Network Industry Awards 2000"; (4) press release "Nokia 
introduces a compact addition to the Nokia IP Security Series: Nokia IP330") and (5) 
Applicant's Specification page 18, lines 6-9. 

With respect to claim 19, Sullivan teaches a plurality of servers for providing web-based 
tax service that allows merchant subscribers to accumulate tax information (see example page 1 
paragraph 0005 and page 15, paragraphs 0130-0131). 
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Examiner notes that paragraph 5 teaches providing web-based tax service that allows 
merchant subscribers to accumulate tax information. 

Further paragraphs 0130-01 3 1 teach the plurality of servers for carrying out the "tax 
service." Specifically, the reference states, "the computer system . . . may include multiple 
computers connected over a computer network." The reference further states, "the plurality of 
computers or devices may be interconnected by a communications network, such as a public 
switched telephone network or other circuit switched network, or a packet switched network or 
other circuit switched network, or a packet switched network such as an Internet protocol (IP) 
network. The network may be wired or wireless, and may be public or private." Examiner 
asserts that in order for the multiple computers to be interconnected by an IP network as taught 
by Sullivan; each computer must be a server. 

With further respect to claim 19, Sullivan does not specifically teach means for providing 
security for information on the servers and information during transmission between the servers. 

Examiner submits a press release for the introduction of the Nokia IP330. Further 
Examiner turns to Applicant's Specification, page 18, lines 6-9 which states, "a first security 
module or function 110 (see also Fig 7) is provided for protecting the system from entry of 
unwanted data during transfer over the network. In one embodiment, as shown in Fig. 6, a 
managed firewall device 40, e.g. Nokia IP330, provides this function." 

Further Nokia teaches (line 7) that the IP330 is a highly cost-competitive, simple-to- 
deploy firewall. 
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As such, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Sullivan to include the Nokia IP330 as means for providing 
security for information on the servers and information during transmission between the servers, 
as taught by Nokia press release and Applicant's Specification. One of ordinary skill in the art 
would have been motivated to implement the Nokia to the system of Sullivan to provide a highly 
cost-competitive, simple-to-deploy firewall (see Nokia press release line 7). 

With respect to claim 20, Sullivan teaches wherein the web-based tax service further 
includes tax identification, tax computation, tax collection, tax remittance and tax reporting for 
audit servers (page 1, paragraphs 0005-0007). 

With respect to claim 21, Sullivan does not teach a managed firewall for preventing 
unwanted data from being entered into the system while data is being transmitted between 
subscribers and the servers. As discussed with respect to claim 19, Nokia a managed firewall 
(see for example Applicant's Specification page 18, lines 6-9 and press release). 

As such, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Sullivan to include the managed firewall, Nokia IP330 as 
means for preventing unwanted data from being entered into the system while data is being 
transmitted between subscribers and the servers, as taught by the Nokia press release and 
Applicant's Specification. One of ordinary skill in the art would have been motivated to 
implement the Nokia to the system of Sullivan to provide a highly cost-competitive, simple-to- 
deploy firewall (see Nokia press release line 7). 
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With respect to claim 23, Examiner notes the combination of Sullivan in view of Nokia 
EP330 represents a tiered architecture, as the managed firewall (Nokia IP330) represents an 
additional tier. In addition, the Nokia IP330 includes a means for PKI 2-way authentication and 
authorization (public key infrastructure), HTTPS post with XML Document and SSH for remote 
administration. Evidence to support this position can be found in the article "Nokia IP Network 
Security Solutions" on page 6 under, "Network Management" Heading. Examiner notes that 
S/Key represents Public Key Infrastructure (PKI) and SSL/TLS is the mechanism by which 
HTTPS runs (see Microsoft Computer Dictionary definition of "HTTPS"). 

With respect to claim 25, Examiner notes that the limitations are substantially similar to 
those of claim 21 and therefore Examiner references the analysis of claim 21. 

Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Sullivan in view 
of Nokia IP330 as applied to claim 19 above, and further in view of Chopra. 

With respect to claim 22, the combination of Sullivan and Nokia IP330 teaches all the 
claimed limitations (as described above) except a means for providing balancing and scalability 
of the servers. Chopra teaches a high-speed rule processing apparatus that may be used to 
implement a wide variety of rule processing tasks including load balancing (see for example 
column 2, lines 23-34 and column 5, lines 10-16). 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Sullivan to include a load balancing feature as taught by Chopra. One 
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of ordinary skill in the art at the time of the invention would have been motivated to modify the 
references in order to provide the most efficient service. 

Claim 24 is rejected under 35 U.S.C. 103(a) as being unpatentable over Sullivan in view 
of Nokia as applied to claim 19 above, and further in view of "Checking Your Server's 
Heartbeat" by Harry Breisford (hereinafter Breisford). 

The combination of Sullivan in view of Nokia, as discussed in detail above with respect 
to claim 19, teaches all the claimed limitations except a means for recording the disk usage, 
access logging and heart beat monitoring. 

Breisford teaches a system monitor feature which allows an administrator to check a 
systems heartbeat, including logs, reports, alerts and charts (see page 1, line 15). Breidford 
further teaches these tools are used to take preventative care of a server (see page 6, line 14-15). 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Sullivan to include a means for recording the disk usage, access 
logging and heart beat monitoring as taught by Breisford in order to take preventative care of the 
servers of Sullivan. 

Response to Arguments 
Applicant's arguments with respect to claims 19-25 have been considered but are 
moot in view of the new ground(s) of rejection. 

Applicant argues on the paragraph bridging pages 3 and 4 that Sullivan't paragraphs 130- 
131 do not teach or suggest that the different tax liability functions are performed by different 
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servers. Examiner notes that this limitation is not claimed. Further, Applicant is reminded that 
reading a claim in light of the specification, to thereby interpret limitations explicitly recited in 
the claim, is a quite different thing from reading limitations of the specification into a claim, to 
thereby narrow the scope of the claim by implicitly adding disclosed limitation which have no 
express basis in the claim. 

As there is no explicit limitation in the claim that different tax liability function be 
performed by different servers, Sullivan need not teach such a limitation. 

In the first two paragraphs on page 4 Applicant argues that Sullivan and Chopra fail to 
teach security for information during transmission between servers. Examiner notes that this 
limitation was newly added. Further such an argument is moot as a result of the new grounds of 
rejection necessitated by the amendment. 

On the last paragraph on page 4, Applicant argues that Sullivan does note teach that the 
network computers are servers. Applicant points out that it has been the position of the 
Examiner that for multiple computers to be interconnected by an IP network each computer 
MUST serve as a server to the other computers. Applicant disagrees and asserts that Sullivan 
does not impose such a requirement, nor does any other document made of record. Applicant 
goes on request that Examiner provide evidence in the form of an affidavit or document to 
support the Examiner's position. 

In response to Applicant's request, Examiner submits the definition of "server" from the 
Microsoft Computer Dictionary. 
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Server - On the internet or other network, a computer or program that responds 
to commands from a client. For example, a file server may contain an archive of data or 
program files; when a client submits a request for a file, the server transfers a copy of the 
file to the client. 

As noted previously, Sullivan teaches transmitting data to one or more centralized 
processors through telecommunications technology or via their own computer network. 
Examiner notes that the interaction of these computers over the network requires them to be 
servers based on the broadest reasonable interpretation of "server." 

On the second paragraph on page 5 Applicant asserts that Sullivan and Chopra, alone and 
in combination, do not teach or suggest the managed firewalls of claim 21 . Examiner notes that 
the amendment to claim 19 alter the scope of claim 21 as well as necessitating a new grounds of 
rejection. As such this argument (i.e. with respect to Chopra) is now rendered moot. 

On the third and fourth paragraphs on page 5, Applicant asserts that none of Examiner's 
cited document teaches that the features of claim 23 can be combined. Applicant further 
challenges Examiner's taking of Official Notice that the combination of such features is old and 
well known. 

Examiner notes that Nokia IP330 serves as evidence to support the combination of 
features of claim 23. 

With respect to claim 23, the references relied upon to teach the Nokia IP330 were 
nictitated by the amendment to independent claim 19, as well as supporting the Offical Notice 
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taken in the prior Office Action. As such, Examiner notes that the rejection of claim 23 is 
properly made final. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to James A. Kramer whose telephone number is (571) 272 6783. 
The examiner can normally be reached on Monday - Friday (8 AM - 5PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Alexander Kalinowski can be reached on (571) 272 6771. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or ,571-272-1000. 




jak 
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